affiliatedigitalletterwritingprogram[.]org

The domain affiliatedigitalletterwritingprogram.org is identified as a brand impersonation threat targeting Binance, a cryptocurrency exchange platform. Analysis indicates the domain was designed to deceive users into believing they are interacting with an official Binance affiliate program, potentially leading to credential harvesting or financial fraud. As of the latest assessment, the domain is offline, though its infrastructure remains a documented risk.

Infrastructure analysis reveals the domain was registered through PDR Ltd. d/b/a PublicDomainRegistry.com on June 18, 2025. It resolves to the IP address 192.3.190.186 and has been flagged by 1 of 95 security vendors on VirusTotal. The domain appears on one security blocklist, and its SSL certificate is classified as R11, a common indicator of low-trust or short-lived certificates. The page title, 'Affiliate Digital Letter writing Program,' further suggests an attempt to mimic legitimate affiliate recruitment portals, a tactic frequently employed in phishing campaigns.

Given the domain's current offline status, immediate interaction risks are mitigated. However, historical indicators and registration patterns warrant caution. Organizations and users are advised to block the domain and its associated IP (192.3.190.186) at the network level. Security teams should monitor for re-registration attempts or similar domains under the same registrar. End-users are reminded to verify affiliate programs exclusively through official Binance communication channels to avoid credential compromise.